feat: 段页式记忆流转、coldcontext 重命名与安全治理

记忆层：
- MemoryBlock 承载 FrameTS/PageSeq/PageKind/BlockRole/CallID
- coldcontext 归档与回填按完整页传递，工具调用参数和配对键不丢失
- 召回先估算总 token，超预算时按全局页相似度标记 inactive
- inactive 仅是 context 渲染期状态，不落盘、不进入 coldcontext，Prune 后重置
- Peek/确认/Remove 两阶段召回，失败保留冷上下文副本
- stablemem 记录 last_recalled_at，删块连带清理边

命名：
- internal/memory/document → internal/memory/coldcontext
- Doc/DocEvent/DocHit → ColdDoc/ColdEvent/ColdHit
- ContextToColdContext/RecentColdContexts/FindColdContexts
- 保留既有 JSON 标签、doc_ 文件前缀与 doc_count 状态键，兼容存量数据

安全治理：
- 工具策略门禁、安全配置、事件总线发布者身份与入站脱敏
- 声明式 SecurityAPI 与 QQ owner/guest profile
- 日志保留策略与相关 e2e/回归判据

验证：go build ./...、go vet ./...、go test ./...（62 包）；
生产副本 e2e：7013 块迁移后 ID/向量/指纹 0 变化、0 缺失。

internal/agent/core/agent.go

@@ -13,7 +13,7 @@ import (
 	"github.com/JianFeeeee/HologramAgent/internal/events"
 	"github.com/JianFeeeee/HologramAgent/internal/knowledge"
 	"github.com/JianFeeeee/HologramAgent/internal/memory"
-	"github.com/JianFeeeee/HologramAgent/internal/memory/document"
+	"github.com/JianFeeeee/HologramAgent/internal/memory/coldcontext"
 	"github.com/JianFeeeee/HologramAgent/internal/memory/social"
 	"github.com/JianFeeeee/HologramAgent/internal/memory/text"
 	"github.com/JianFeeeee/HologramAgent/internal/memory/vector"
@@ -69,7 +69,7 @@ type Agent struct {
 	cancel         context.CancelFunc
 
 	// 文档记忆（第二层）
-	docStore *document.Store
+	coldcontextStore *coldcontext.Store
 
 	// 知识库
 	knowledge *knowledge.Store
@@ -272,7 +272,7 @@ type AgentConfig struct {
 	Indexer     *memory.Indexer
 	Tracker     *tracker.Tracker
 
-	DocStore    *document.Store
+	DocStore    *coldcontext.Store
 	Knowledge   *knowledge.Store
 	SocialStore *social.SocialStore
 	TextMemory  *text.Memory
@@ -412,27 +412,27 @@ func New(cfg AgentConfig) *Agent {
 	}
 
 	a := &Agent{
-		id:              cfg.ID,
-		startTime:       time.Now(),
-		provider:        cfg.Provider,
-		providerManager: cfg.ProviderManager,
-		io:              cfg.IO,
-		memory:          cfg.Memory,
-		graph:           graphMemoryOf(cfg),
-		kernelSource:    cfg.KernelSource,
-		parentID:        cfg.ParentID,
-		taskPrompt:      cfg.TaskPrompt,
-		dataDir:         cfg.DataDir,
-		indexer:         cfg.Indexer,
-		tracker:         cfg.Tracker,
-		context:         rc,
-		systemPrompt:    cfg.SystemPrompt,
-		ctx:             ctx,
-		cancel:          cancel,
-		docStore:        cfg.DocStore,
-		knowledge:       cfg.Knowledge,
-		social:          cfg.SocialStore,
-		textMem:         cfg.TextMemory,
+		id:               cfg.ID,
+		startTime:        time.Now(),
+		provider:         cfg.Provider,
+		providerManager:  cfg.ProviderManager,
+		io:               cfg.IO,
+		memory:           cfg.Memory,
+		graph:            graphMemoryOf(cfg),
+		kernelSource:     cfg.KernelSource,
+		parentID:         cfg.ParentID,
+		taskPrompt:       cfg.TaskPrompt,
+		dataDir:          cfg.DataDir,
+		indexer:          cfg.Indexer,
+		tracker:          cfg.Tracker,
+		context:          rc,
+		systemPrompt:     cfg.SystemPrompt,
+		ctx:              ctx,
+		cancel:           cancel,
+		coldcontextStore: cfg.DocStore,
+		knowledge:        cfg.Knowledge,
+		social:           cfg.SocialStore,
+		textMem:          cfg.TextMemory,
 		// mediaStore 已随 CAS 淘汰：块自带负载。知识层的媒体也已自带字节
 		// （见 knowledge 的媒体侧车），不再需要外部 getter/putter 接线。
 		personality:       cfg.Personality,